$ rpki-client -vvf rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft File: FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft (raw, json) Hash identifier: XELJUdOop1eyL5FkeLDw3I8OoJKG1Wa0K/hPWiuf954= Subject key identifier: CE:08:5C:54:9B:86:FB:9A:D8:E5:9E:78:67:88:C8:24:37:AA:0D:9E Authority key identifier: FB:3D:49:EC:18:2C:4A:99:CC:23:28:BF:1C:D3:AB:DA:B7:E2:7A:74 Certificate issuer: /CN=FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74 Certificate serial: 09A56ADF08E580B3992CEBF3D4307C7583524A7C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 02:03:18 +0000 Manifest this update: Tue 21 Jul 2026 01:58:18 +0000 Manifest next update: Wed 22 Jul 2026 05:25:18 +0000 Files and hashes: 1: FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.crl (hash: TJLj9a7ESokXAEEi2loBUCcTC8hwbXmWM5ykofkmc34=) 2: 3130332e3135302e3135382e302f32342d3234203d3e20313430333937.roa (hash: fIUZWJqNIQdeGF5YTGMhUjUqsUhoEqCYOqgqGlb+3MI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.crl rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a5:6a:df:08:e5:80:b3:99:2c:eb:f3:d4:30:7c:75:83:52:4a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74 Validity Not Before: Jul 21 01:58:18 2026 GMT Not After : Jul 22 05:25:18 2026 GMT Subject: CN=CE085C549B86FB9AD8E59E786788C82437AA0D9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1f:af:14:77:26:79:3b:7c:5f:f7:c3:60:3b: 7f:80:6c:4b:1d:19:40:26:53:41:46:e9:f3:db:09: 6c:fc:08:f1:ca:15:79:84:0e:5e:fe:af:09:2d:55: f9:08:b8:7f:84:69:39:8e:b0:96:06:31:15:c3:d7: 46:d7:c7:32:21:a2:2d:40:08:00:e8:46:50:f4:76: 3a:dd:0a:22:d5:48:f1:e5:00:7e:1f:c0:22:d2:4c: fa:cb:30:19:7e:17:ff:5d:02:94:a0:3d:bb:aa:ae: 77:3c:de:2e:61:a3:15:11:92:2d:04:d0:ba:db:06: cb:65:4f:50:b3:7a:a9:05:50:67:24:53:58:76:f6: be:04:51:8a:b8:39:68:aa:88:df:e7:b0:70:da:5e: 06:f0:3f:ac:63:5b:ab:9b:d8:66:e7:4f:ff:9a:ad: f9:f2:12:9a:9b:3c:27:23:b5:7f:8f:0d:c1:44:d8: e9:92:21:d0:d1:9e:55:18:7e:15:00:79:02:20:8c: 74:55:ce:3f:54:4b:a6:b5:9f:3f:fd:5a:4b:1c:5d: cb:44:94:7b:c8:c8:49:e4:68:f9:6d:54:42:6e:34: e7:aa:13:78:58:b2:23:e4:b5:a7:84:9f:3f:68:07: 5e:7c:40:60:7f:01:c9:2d:64:6f:70:5f:cd:c8:1c: ed:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:08:5C:54:9B:86:FB:9A:D8:E5:9E:78:67:88:C8:24:37:AA:0D:9E X509v3 Authority Key Identifier: keyid:FB:3D:49:EC:18:2C:4A:99:CC:23:28:BF:1C:D3:AB:DA:B7:E2:7A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:0e:24:32:e7:28:85:a0:04:4b:3b:b0:26:fb:7e:fb:c3:6b: 3e:da:9c:df:da:a8:38:0b:36:10:74:02:7c:0e:52:2a:18:91: b8:52:ea:98:3a:4e:ae:7d:88:f0:17:ba:a1:eb:dd:9e:75:0b: c6:62:1d:85:43:1b:9c:5a:a4:2d:eb:c4:e0:70:a2:25:a3:0b: fa:58:e4:5e:23:0a:9f:a9:f5:28:25:85:82:78:5f:73:0c:6a: ca:e0:f2:dc:db:44:fd:b3:88:41:1b:22:76:6f:cd:f7:af:3d: b5:c5:70:7f:53:69:fd:3d:74:a9:ac:a3:62:97:7f:52:6f:e2: 16:73:4a:34:bc:31:f3:57:a9:58:5a:cc:89:89:fb:7e:c6:73: 3a:f0:41:cd:76:ba:5e:88:ab:d8:1b:68:09:02:bf:52:1f:7e: 27:6e:a0:75:7e:5c:8b:2a:77:31:a7:be:a7:92:d2:86:6f:70: 45:38:c5:f4:b2:e7:5b:b5:96:83:df:17:5e:34:d3:eb:c2:95: d0:6b:d0:3d:b6:e3:1d:46:77:00:19:53:74:e2:cd:2c:36:73: 43:d5:2d:80:a3:77:1f:e0:b7:92:a2:3f:54:0c:c6:b4:59:0c: 45:48:b8:0d:6e:e2:63:d9:3b:5e:09:2a:e2:3c:67:df:77:de: b6:bf:76:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCaVq3wjlgLOZLOvz1DB8dYNSSnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzRDQ5RUMxODJDNEE5OUNDMjMyOEJGMUNEM0FCREFC N0UyN0E3NDAeFw0yNjA3MjEwMTU4MThaFw0yNjA3MjIwNTI1MThaMDMxMTAvBgNV BAMTKENFMDg1QzU0OUI4NkZCOUFEOEU1OUU3ODY3ODhDODI0MzdBQTBEOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoH68UdyZ5O3xf98NgO3+AbEsd GUAmU0FG6fPbCWz8CPHKFXmEDl7+rwktVfkIuH+EaTmOsJYGMRXD10bXxzIhoi1A CADoRlD0djrdCiLVSPHlAH4fwCLSTPrLMBl+F/9dApSgPbuqrnc83i5hoxURki0E 0LrbBstlT1CzeqkFUGckU1h29r4EUYq4OWiqiN/nsHDaXgbwP6xjW6ub2GbnT/+a rfnyEpqbPCcjtX+PDcFE2OmSIdDRnlUYfhUAeQIgjHRVzj9US6a1nz/9WkscXctE lHvIyEnkaPltVEJuNOeqE3hYsiPktaeEnz9oB158QGB/AcktZG9wX83IHO0rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzghcVJuG+5rY5Z54Z4jIJDeqDZ4wHwYDVR0j BBgwFoAU+z1J7BgsSpnMIyi/HNOr2rfienQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM2MGYwNzgtOGEyMC00OGQxLTgyYjgtZTFmNTBhMTU1MjAxLzAvRkIzRDQ5RUMx ODJDNEE5OUNDMjMyOEJGMUNEM0FCREFCN0UyN0E3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjNENDlFQzE4MkM0QTk5Q0MyMzI4QkYxQ0QzQUJEQUI3RTI3 QTc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM2MGYwNzgtOGEyMC00OGQxLTgy YjgtZTFmNTBhMTU1MjAxLzAvRkIzRDQ5RUMxODJDNEE5OUNDMjMyOEJGMUNEM0FC REFCN0UyN0E3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8OJDLnKIWgBEs7sCb7fvvDaz7anN/aqDgL NhB0AnwOUioYkbhS6pg6Tq59iPAXuqHr3Z51C8ZiHYVDG5xapC3rxOBwoiWjC/pY 5F4jCp+p9SglhYJ4X3MMasrg8tzbRP2ziEEbInZvzfevPbXFcH9Taf09dKmso2KX f1Jv4hZzSjS8MfNXqVhazImJ+37GczrwQc12ul6Iq9gbaAkCv1IffiduoHV+XIsq dzGnvqeS0oZvcEU4xfSy51u1loPfF1400+vCldBr0D224x1GdwAZU3TizSw2c0PV LYCjdx/gt5KiP1QMxrRZDEVIuA1u4mPZO14JKuI8Z9933ra/dlo= -----END CERTIFICATE-----Generated at Tue Jul 21 06:56:31 2026 by rpki-client